TITLE 

Data Card and Authentication Process Therefor 
BACKGROUND 

The present invention was conceived in the context of aircraft pilot 
identification, but it can be used in any situation that requires positive verification 
of the identity of an individual carrying an identification card. 

As is well known, most identification methods that require verification can 
be defeated quite easily. All that is required is that a person hack into a 
database containing the information used for verification and insert his or her 
own photograph, signature, or whatever is used for verification. At an even more 
basic level, there are web sites that allow the user to create a counterfeit driver's 
license for just about any state by inserting the user's photograph, signature, and 
vital statistics into a form on the web site and then printing out and laminating the 
resulting "license". 

A successful verification system should be fast and easy to use, otherwise 
it would constitute a bottleneck in processing large numbers of people. Ideally, 
the process would be set up to be started by swiping a card having a magnetic 
strip, barcode, optical storage area, or any combination thereof on it through a 
card reader such as is done today with credit cards. The process should also 
have more than one component of authentication, since the probability of 
someone hacking into more than one database increases geometrically rather 
than arithmetically with the increase in number of databases that need to be 
penetrated. The process of enrolling people in the system should also be 
convenient and fast in order to encourage its use. Ideally, it would also use 
existing equipment as much as possible in order to reduce the cost as much as 
possible. 



OBJECTS OF THE INVENTION 



Accordingly, it is an object of the present invention to provide an 
identification system that provides a level of security that is greater than that in 
present systems. 

It is a further object of the present invention to provide such a system that 
allows quick and easy enrollment of persons in it. 

It is a further object of the present invention to provide such a system that 
is quick and easy to use. 

It is a further object of the present invention to provide such a system that 
uses existing computer-related equipment to a large extent. 

It is a further object of the present invention to provide such a system 
having a verification method comprising two or more components that are stored 
in physically separate locations for additional security. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows the overall layout of the present invention. 

Figure 2 shows an identification card according to the present invention. 

SUMMARY 

Briefly, the present invention comprises a system for creating an 
identification card incorporating a secure means of verifying both the card and 
the person presenting the card. When a person is to be enrolled in the system 
he or she provides unique information such as a photograph of anything desired 
which is to be incorporated on the card, and his or her signature, which is also 
unique to that person and incorporated on the card. The photograph and 
signature are digitally scanned and the grayscale or color plane values of certain 
pixels, chosen by means of a characteristic value function algorithm, are 
recorded on a magnetic strip, barcode, optical storage area, of a combination of 
these data storage media on the card along with the cardholder's name and any 
other desired information. The digital photograph and digital signature are 
recorded in a remotely located secure database. When the card is presented for 
authentication the holder's name is sent to the remote database, along with the 
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pixel values that were recorded on the card. The pixel values and identifying 
information are then sent, together with the stored digital photograph and digital 
signature, to a remote, network-inaccessible processor. The characteristic value 
function algorithm that was used to determine the pixel values that are stored on 
the card is stored at this location; the digital processor uses it to determine the 
pixel values from the digital photograph and signature. The processor then 
compares the pixel values it received with the pixel values it determined from the 
digital photograph and signature. If they are not identical, a message is sent 
back to the point of authentication request indicating that the card is not 
authentic. If they are identical, a message is sent back confirming the 
authenticity of the card and holder; the stored digital photograph and signature 
are also sent back and displayed, to allow further visual authentication. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

As shown in Figure 1 the present invention comprises a system for 
creating and authenticating a secure identification card. The system comprises 
card 10 having a magnetic strip, barcode, optical storage area, or a combination 
of these data storage media on it, conventional card reader 12 for reading the 
data on card 10, database 14 at a first remote location, remote network- 
inaccessible processor 16 at a second remote location, and display means 18 
located near card reader 12. Card reader 12 and display means 18 are placed in 
locations such as controlled access areas, stores, etc. where identification cards 
are presented for verification. All of the components except processor 16 are 
connected by means 20 such as conventional telephone wires, a wireless 
network, or the internet. Processor 16 is connected to database 14 by secure 
communication link 21, as is well known in the art, so that in use processor 16 
can be accessed only from the first remote location housing database 14. 
Isolating processor 16 in this manner assures a high level of security for the 
overall system. For added security, the output from processor 16 can be sent to 
display means 18 by a secure communication link if desired. 
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Figure 2 shows identification card 10 according to the present invention. It 
has on it certain unique information that in this example comprises photograph 
22 and signature 24. Card 10 also has on it magnetic strip, barcode, optical 
storage area, or combination of these data storage media 26, which has encoded 
thereon the pixel values determined using the characteristic value function 
algorithm when the card was created. Card 10 may also contain any other 
information desired, either on its face or encoded onto storage medium 26. 
Photograph 22 may be of any subject desired by the owner of card 10; signature 
24 is that of the card owner. Storage medium 26 also contains the information 
needed to begin the verification procedure. 

To determine the pixel values to be encoded onto storage medium 26, 
photograph 22 and signature 24 are scanned to produce digital copies (not 
shown) which are comprised of discrete pixels, as is well known in the art. Then 
the digital photograph and digital signature are processed using a characteristic 
value function algorithm that selects certain pixels and reads their grayscale or 
color plane values, which are encoded as is well known in the art onto magnetic 
strip 26. The characteristic value function algorithm used to select the pixels may 
be the same for all cards or it may be varied from card to card. The 
characteristic value function algorithm is then stored in the same location as 
network-inaccessible processor 16. See the Appendix for a further explanation 
of the authentication process. 

The digital copy of photograph 22 and digital copy of signature 24 are then 
sent to remote database 14 where they are stored and indexed in a way that 
allows them to be retrieved when desired to authenticate that particular card. 

In operation, when the cardholder presents card 10 for verification it is 
swiped in conventional card reader 12, which then begins the verification 
process. Remote secure database 14 is contacted and the digital copies of 
photograph 22 and signature 24 are retrieved and sent to network-inaccessible 
processor 16. The cardholder's name and pixel values encoded on storage 
medium 26 are also sent to processor 16. Processor 16 applies the 
characteristic value function algorithm to the digital copies of photograph 22 and 
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signature 24 and the values of the pixels determined by the characteristic value 
function algorithm are read. Since a digital image is stored as a series of 
discrete pixel value entries in a table, the characteristic value function algorithm 
will determine the same pixels, and hence the same pixel values, each time; i.e., 
its repeatability is 100%. Thus every time card 10 is read the pixel values 
determined by processor 16 will be the same as those that were encoded on 
storage medium 26 when card 10 was created. 

Processor 16 next compares the pixel values it received with the request 
for authentication to those it determined by applying the characteristic value 
function algorithm to the digital photograph and signature it received from the 
remote database. If they are not the same, the card is rejected as counterfeit 
and a message is returned to display means 18 indicating the rejection. If they 
are the same, the digital photograph and signature are sent back to display 
means 18 along with an indication that card 10 and its holder have been 
authenticated. Displaying photograph 22 and signature 24 on display means 18 
allows further visual authentication of the card presenter. 

The comparison between the pixel values determined by processor 16 
and the pixel values encoded on magnetic strip 26 has been described as 
analytical, taking place remotely from where the card is presented. In addition, 
card 10 is created at another remote location, both of which insure that end-to- 
end security is maintained and the characteristic value function algorithm 
remains secret. 

Also, the digital signature could be stored at a separate location to provide 
additional security. For even greater security the pixel values on the digital 
signature could be determined by a second characteristic value function 
algorithm which would require a second processor, stored in yet another location. 
Counterfeiting this latter embodiment of card 10 would require that two 
databases and two network-inaccessible processors be hacked into and/or that • 
two characteristic value function algorithms, even if stored on magnetic strip 26 in 
assembly language, be reverse engineered, a situation that would provide a very 
high degree of security. 
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Obviously also the card could have encoded on magnetic strip 26 one or 
more pieces of unique information in addition to the picture and signature, 
thereby increasing the level of security even more. 

In the following Appendix Section 1 defines the general terms used in the 
calculations and describes the context of the calculations. Section 2 contains a 
high-level overview of the process of creating the data that will be encoded on 
the card. Section 3 contains a short description of what is actually stored on the 
card. Section 4 gives a short description of the data that will be used to verify a 
card when it is presented for verification. Section 5 contains the core 
mathematics used in implementing the system. Section 6 expands on the 
contents of Section 5 and describes the preferred embodiment of the analytical 
methods behind the system of the present invention. Section 7 describes a 
method of preventing identical data from being encoded onto two or more cards. 
Section 8 describes methods of implementing the above analytical methods on a 
computer. Section 9 discusses the memory and storage requirements for a 
system as shown herein. 

APPENDIX 
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Data Card Authentication Process 



1 Introduction 

Definition 1 A graphical value is an integer in the range 0 to 255. 

Definition 2 A rational graphical value is a rational number between 0 and 
255, inclusive, that may be expressed as the ratio of two graphical values. 

Definition 3 A(n) (8-bit) chromatic value is a real number of the form 
where u is a graphical value. 

Suppose a 2 x 2 inch image is 24-bit color scanned at £ DPI. This means 
there are 4£ 2 pixel positions covering the entire image, each with a 24-bit color 
vector associated with it. Let 

2^-1 < 4 £2 < 2 q 
for some positive integer q, and let 

(Cii,Ci2,Ci3) 

be the RGB vector of (8-bit) chromatic values at pixel position i. The pixels 
are ordered by row/column orientation, so that pixel position (p, k) would cor- 
respond to position i = 2 (p - 1) f +k. Let Q be the totality of all (C»i, Ci2, Ciz) 
for all pixel positions. 

Let 1^ = (tji, 2j2i * * * j ijn) be a vector of choices of n-many pixel positionsl 

through 4f 2 , with repeats allowed. There are ( 4 £ )-many such choices for jj n \ 
Let 

/ Ci jX \ Ci jX 2 Ciji3 ^ 



Cij 2 l Cij22 Cij2$ 



\ C ijn i C ijn 2 C ijn s ) 



nx3 



be the matrix of chromatic values chosen by pixel position indexed by lj n \ The 

set 1^ is called the index set for C^ n \ 

Finally, let Y^ = (yji,Vj2, • * * ,yjn) be an arbitrary vector of chromatic 
values, called the skew data. 



2 Calculation Methods 

Define 
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where & 1 <n> may be viewed as a 3 x 1 vector or matrix. 

3 

The three values of b T (n) collectively represent the least-squares regression 

3 

coefficients for the observed (scanned) chromatic data fitted against the skew 
data at positions indexed by 1^. The strategic choice of the skew data 

for a particular 1^ will ensure that identical values for for a different 1^ 
will not result in identical values for b^n) . In other words, 

Y< n) * Yi n) => 6 l( n, * &,<„, even if C< n) = C< n) 

Now let 

I = ^ ni) ,4 n2) • • • ,ll nfc) , k > ko > 1, kpnj < 4£ 2 j 

be the set of index sets for A:-many pixel choices each of size rij . The choice for 
k must be at least &o, which must be greater than 1. The value for k and for 
the subsidiary choices for rij need not be globally constant; they may vary from 

k 

image to image. The condition k £ rij < 4£ 2 ensures that there are "enough 

pixels to go around" even if there are no repeats within the individual 
Similarly, let 

c=(c^ l) ,c^ 2) -..,ci nfc) ) 

with all expressions corresponding to their meanings in I, and 
Y=(Y( ni) ,Y^ 2) ...,Yi nfc) ) 

3 Written and Stored Elements 

k 

The 3 x YL n j matrix 

would be written digitally on the card, while the data 

(n,Y,fi) 

would be stored for further processing purposes. 

4 Authentication Process 

When authentication is requested, a set of values, B r , will be read from the 
card. These values will be reformatted as necessary for comparison purposes 
only. 
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The authentication process will use the stored values for (I, Q) to construct 
a candidate C c , and then (C C ,Y) will be used to calculate a candidate B c . If 
and only if 

B r = B C 

exactly, then the card is. reported to be authenticated. 



5 Calculation Issues 

The exact comparison of 3B r = B c in the authentication process leads imme- 
diately to issues of error propagation during the calculation of the individual 
fcjCn) . Since C^ T C^ is a 3 x 3 matrix, its inverse is relatively easy to calculate 

with no loss of precision. The number of multiplications is limited enough to 
warrant an exact, rational evaluation. However, one division is needed to find 

, and this may be accomplished numerically through further ra- 
tional multiplications, with limits on the introduced error. 

An alternate method for performing required calculations that eliminates all 
error issues when comparing B r = B c is to restrict the result of intermediate 
multiplications to chromatic values. In other words, when chromatic value ^ 
is multiplied by chromatic value ^5, instead of using the value 

uv 



(255) 2 

in subsequent calculations, the closest chromatic value ^ should be used. 

Definition 4 The chromaticon of a real number is its closest chromatic valued 

By policy, the chromaticon for real number that are exactly half way between 

two chromatic values will be the lesser chromatic value. 

Only chromaticons will be used in the calculation of the & T (n), whether for 

j 

initial writing purposes, or for authentication. 
Let 

uv = 255/c + q 

where 0 < q < 254, and A: = [^J, and q — uv - 255k. Since u and v are 
graphical values, then 0 < k < 255. Note how there are no "half- way" issues in 
these circumstances. Then 

uv , q 

= k + — 

255 255 

If 0 < q < 127, then k is the closest graphical value to ~, which means ^5 
is the closest chromatic value to ^ffj 7 * 

If 128 < q < 254, then k -f 1 is the closest graphical value to which 
means is the closest chromatic value to • 

These facts prove the following lemma. 
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Lemma 5 The chromaticon of yggp is x ( (255^ ) = 253 > where 



w 



■{ 



fc, 0 < q < 127 
k + 1, 128 < g < 254 



fc = L^ssJ, and Q = uv- 255k. 

Therefore, the key to calculating may be found in finding k\ which 

involves dividing uv by 255. However, division by 255 is not as easy in digital 
logic as division by 256 = 2 8 . An easier way to find w is to calculate 



w* = 



256 



(1) 



Calculation of w* involves one addition of a power of 2 to uv, one 8-bit right 
shift, one truncation, followed by another addition of a power of 2 with uv, one 
more 8-bit right shift, and a final truncation, all of which may be accomplished 
without error very quickly in digital logic. The utility of calculating with w* 
instead of w is found in the following theorem. 

Theorem 6 w* = w 



Proof. Consider 

uv = 255/c + q 
with all definitions as in the Lemma. Then 

uv + 128 = 255A: + q + 128 

= 256k + {q-k + 128) 



which means 



mj+128 jL , g-fc-f 128 

256 ~ / 256 



Since 0 < q < 254 and 0 < k < 255, the conceivable range of q - k is -255 
through 254. 

Case 1: -255 < q - k < -128 
In this case, we have 



which means 



Hence, 



255 q-k 1 
-1 < < < -- 

256 " 256 2 



1 q-k 1 n 
-2 < l56- + 2 < ° 



256 J " L \ 256 + 2j_ 



= k- 1 
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Case 2: -128 < q - k < 128 
Here, 

-I<£z*<I 

2~256 2 



which means 



Hence, 



0 <«zi + I<i 

- 256 2 



ut; + 128 I _ 
256 J~ fc 



Case 3: 128 <q~k< 254 
Finally, 



which means 



Hence, 



To review, 



I<i^<^ <1 

2 - 256 - 256 



, ^ q-k 1 , 1 
^l56- + 2 <1+ 2 



uv + 128 
256 



t = 



uv + 128 
256 




= k+1 



-255 <q-k< -128 
-128 < g - k < 128 
128 <q-k< 254 



So, 



256fc + g + 127, -255 <g-fc< -128 
t + uv + 128=^ 256fc 4- q + 128, -128 < g ~ A; < 128 
256fc + g + 129, 128 <q-k< 254 

Recall that 0 < fc < 255 and 0 < q < 254. Then for the first case, -255 < 
q-k < -128 means k - 255 < q < k - 128 so that 0 < q < 127. Hence, for the 
first case, 0 < q < 127 means 127 < q + 127 < 254, so that 

1 127 ^ g + 127 254 , 
- < < < < 1 

2 256 - 256 256 



which means 



t + uv + 128 



J-h 



g + 127 



256 J [" ' 256 

for the first case, i.e., 0 < q < 127. 

Similarly, for the second case, -128 < q - k < 128 means k - 128 < q < 
k + 128 or 0 < q < 254. When 0 < q < 127, then 128 < q + 128 < 255, which 
means 

1 „ g + 128 ^ 255 



- < 
2 



256 



< 256 <1 



5 



and when 128 < q < 254, then 256 < q + 128 < 382, which means 



1< £±128 < 382 1 
- 256 " 256 2 



Hence, 
w* = 



t + uv + 128 




256 





u , 9 + 128 1 f fc, 0<q<l 
256 J \ fc + 1, 128<g< 



127 
254 



for the second case. 

Also, for the third case, 128 <q-k< 254 means fc + 128 < q < fc + 254 or 
128 < q < 254. This means 257 < q + 129 < 383, or 



i 257 ^ q 4- 129 383 , 1 

1 < < < < 1 + - 

256 ~ 256 " 256 2 



Hence, 



t + uv + 128 
256 



fc + 



g + 129 
256 



= fc + 1 



for the third case, i.e., 128 < q < 254. 
In summary, 



f fc, 0 < q < 1 
\ fc + 1, 128 < q < 



127 
254 



w 



6 Algorithms 

Since all values in C will be chromatic values, then for purposes of calculation, 
only the numerator of all values need be used. In particular, since C^ T cj n ^ is 

symmetric, and the algorithm for calculating involves the deter- 

minate and adjoint elements, only the upper triangular elements of C^ T C^ n \ 
using the numerator of each chromatic value, need be evaluated before the in- 
verse is calculated. 

In particular, the exact calculation of the determinate and adjoint involves 
three types of algebraic manipulations: Addition/Subtraction, Multiplication, 
and Division. 

Conjecture 7 The sum or difference of two chromatic values is a chromatic 
value j with the understanding that negative chromatic values and those exceeding 
1 are re-expressed modulo 1. 

Proof. If and ^ are chromatic values, then 2^5 + 2^5 = ^ ■ If 
u + v > 255, then ^ + 2S5 = H± £lP- * 0, then * - afe = a =^F- 

In all cases, ± is a chromatic value. ■ 
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Conjecture 8 The product of two chromatic values is a chromatic value, with 
the understanding that the chromaticon is the result of the multiplication. 

Conjecture 9 The quotient of two chromatic values is a rational graphical 
value. 

Proof. Let ^ and ofs 7^ 0 be chromatic values. Then 



255 = H 

This means the quotient is the ratio of two graphical values. Since 0 < u < 255 
and 1 < v < 255, then the smallest ^ may become is 0 = ~, and the largest it 
may become is 255 = ^f 5 -. Hence, the quotient is a rational graphical value. ■ 

Notation 10 If & and £2 are chromatic values, then x(&C2) = XC1C2 & the 
chromaticon of (1 and £ 2 - 

Lemma 11 |cj n ^ T C^ is a chromatic value. 

Proof. We have 

( E xc? jkl t xC ijk iC ijk2 t xC ijk iC ijh3 \ 

k=l k=l ' * 

t xCi jk2 c ijkl t xcf jk2 

k=l k=l 

n n 

1 E xCijkzdjki E xCi jk sd jk 2 
\ k=\ k=l 



r (n)Tp(n) 
3 3 



E xCi jk 2C ijk3 

k=l 



Excl 



modi 



k=i 



J** ) 



by the policies of Conjectures 7-8. 

Expanding C^ T C^ by its first column, we have 



(2) 



C (n)T C (n) 



x E xC? 1 



x E xc? jk2 E xC$ k3 
k=i k=i 



-x (Ex^^c^s)) 

n 

-x E xc ijk2 c ijkl 



2 mod 1 



fc=i 



+X E xC ijk sC ijk i 
k=i 



n n 

xExC ijk iC ijk2 E xcf. k3 

£ ~ l mod 1 



k=i 

n 



-x E xCi jk iC ijk3 E xC ijk zC ijk 2 



k=l 



fc=l 



X E xCi jk iC ijk2 E xd jk 2Ci jk 3 
* =1 „ * =1 „ modi 

-x E xC hk iC ijk3 E xcf jk2 

k=l 



By the policies of Conjectures 7-8, we see immediately that 
a chromatic value. ■ 



C (n)T C (n) 



(3) 
is 
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Lemma 12 The adjoint of C^ T C^ is a 3 x 3 matrix of chromatic values. 
Proof. As before, we have 

( E xcf jkl t xc ijkl c ijk2 t xc ijkl c ijk3 \ 



p(n)T r (n) 
3 3 



Let 



fc=l k=l k=l 

t xC ijh 2C ijkl t xcf jk2 t xc ijk2 c ijk3 

k~l k=l k=l 

n n n 

l E xC^C^i E xCi jk 3C ijk2 E x<?? 3 ; 

V k=l k=l k=l / 



modi 



jt=i k=\ \k=i J 

B = X E X^ ifcl C iifc3 E X^ fc3 C iifc2 - X E xC ijk iC ijk2 £ xC? ifc3 modl 

fc=l fc=l fc=l k-1 

n n n n 

d = x E xC iifc iCi Jfc 2 E xCi jfc 2C ijfc3 - x E xC^iCW E xC\ ;. fc2 mod 1 

n n n n 

£ = X E X<?i, fc2 Ci ik 3 E xQ^aCi^i - x £ xC ijk2 C ijkl E X<?? 3 modl 
fc=l fc=l fc=l 2 fe=l 

^ = xe^.e^-^exmJ modi 

fc=l Jfc=l \k=l / 

n n n n 

G = X E xCi jk \Ci ik3 E xC ijk2 C ijkl - x E xC? kl E xC^C^modl 

&=1 fc=l &=1 k—1 

ti n n n 

H = x E xCi jfc 2Ci E xCi^sCi-^ - X E XC? 2 E xCi ifc3 C iifc i mod 1 
fc=l fc=l fc=l 

n n n n 

# = X E xCi jk iC ijk2 E xCi ifc3 Ci jfc i - X E XC? i E xCi jfc 3Ci jit 2modl 

fc=l fc=l fc=l k=l 

L = xtxCZ kl £xC? jk2 -x(±x(C ijk iC ijk2 )) modi 
k=i k=i \k=i J 

(4) 

Then the adjoint of cJ n)T C< n) is 

( A B D\ 
J (cj n)T C< n) ) = IE F G \ (5) 
V ' \H K L ) 

which is a 3 x 3 matrix of chromatic values, by the policies of Conjectures 7-8. 



Theorem 13 6j<n) is a 3 x 1 vector of rational graphical values. 
Proof. We have 



Since 



we have 



(cfcf)" 1 = 



(n) 



J 



\c™ T cf\ bp = j (c<" )r c< n) ) d; )T v^ 



Now 



j(c< n)r c^)c< n)T = 



and 



cv 



(n)T c (n) 



+xBC ijl2 
+xDC ijl3 

+xFC ijl2 
+xGC ijl3 
xHC iiiX 
+xKC ijl2 
+xLC ijl3 



xAC ijiX 
. +xBC ijl2 
+xDC ijl3 



xAC ij2l 
+xBC ij22 
+xDC ij23 

xEC ij2l 
+xFC ij22 
+xGC iji3 

xHC ij2l 
+xKC ij22 
+xLC ij23 



yi + x 



xEC ijxl 
+xFC ijl2 
+xGC ijl3 



xHC i}ll 
+xKC ijl2 
+xWi n z 



Vi+X 



+ x 



yi + x 



+ x 



\ 



xAC ij2 i 
+xBC ij22 
+xDC ij23 
xAC ijnl 
+xBC ijn2 
+xDC ijn3 
xEC ij2l 
+xEC ij22 
+xGC ij23 
xEC ijnl 
+xFC ijn2 
+xGC ijn3 
xHC ij2l 
+xKC ij22 
+xLC ij23 
xHC ijnl 
+xKC ijn2 
+xLC ijn3 



xAC ijnl 
+xBC ijn2 
+xDC ijn3 

xEC ijnl 
+xFC ijn2 
+xGC ijn3 

xHC ijnl 
+xKC ijn2 
+xLC ijn3 



2/2 



mod 1 



2/2 



2/2 



Vn 



mod 1 



/ 



(6) 

which is a 3 x 1 vector of chromatic values by the policies of Conjectures 7-8. 



Since 



c (n)T c (n) 



is a (scalar) chromatic value, then by Conjecture 9, b^) 

is a 3 x 1 vector of rational graphical values. ■ 
k , 
The 3 x n j matrix M w = ^fc^), i> T (n 2 >, 



.j,^;, ,b T (n k ) ) is therefore a matrix 
of rational graphical values, where each b^ n .) has a common graphical value de- 
nominator among its three components (see the proof of Theorem 13 on page 8). 
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For simplicity, the matrix B w will be written as a stream of 4A>many graphical 
values in the following order: 



= < 



A > ^ll J ^12 i tti 3 ,a2i,/32,a22,Q:23 J ** " , Otji , 0^2, ^3, /L, f 

v v ' 

j9j in position ((j — 1) mod 4) + l 



where 



Since each ajk and /?j is an 8-bit integer, then will be of binary length 
8 x 4k = 32/c. 



7 Duplicate Prevention 

To review, the strategic choice of the skew data Y^ n) for a particular I^ n) will 

ensure that identical values for C^ n) for a different 1^ will not result in identical 

values for b^) . To be specific, suppose B Wl has been calculated for a particular 

3 

fci-many choices (Yi,Ii) given Ci. Suppose a different color matrix C 2 has 
produced an identical B Wl for another fci-many choices (Y 2 ,Il2) given C2. This 
event is highly unlikely to occur with a random choice of Y 2 : Approximately one 
chance in 2 32fcl for A^-many choices of (Yj n *\ . However, if this event does 

occurs, then one more (Y^j. 1 ^, ij^J* 1 ^ will be chosen to calculate one more 

b <„) to produce (k\ -f l)-many choices (YS,!?) given C2. This will produce a 

new B W2 that is necessarily different from M Wl , since the binary representations 
will necessarily be of different lengths. Note how this adjustment need only be 
performed once to prevent all duplicate B w . 

8 Calculation Methods 

The calculation methods found throughout this document may be implemented 
with digital logic operating on registers. The details found below are flexible 
enough to allow for higher precision color scanning, e.g., 48-bit color rather than 
24-bit, or more sophisticated graphical effects, e.g., dithering. 



8.1 Encoding M w 

Given n, lj n \ Y^ n \ and C^ n \ the following steps make a^, a^OLjz.fij available 
for encoding, for j = 1, 2, . . . , k. All calculations are performed according to the 
policies of Conjectures 7-9, i.e., for chromaticons modi. 

1. Calculate the 3 x 3 matrix cj n)T cj n) [see (2) on page 7]. 
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2. 


Calculate the scalar 0j = |cj n)T c5- n) | [see 


(3) on page 7]. 


3. 


Calculate the 3 x 3 matrix J (cJ n)T cj" ) ) 


[see (5) on page 8]. 


4. 


Calculate the 3x1 vector {otji,otj2,Otj3) 


= /3j6j(n) [see (6) on page 9]. 


5. 


Repeat Steps 1-4 for incremented j. 




8.2 


Chromaticon XC1C2 





Given two chromatic values & and £2, the following steps make XC1C2 available 
for further calculation. All calculations make reference to 4-digit hexadecimal 
encoded (16-bit) assembly level instructions in a specially designed Application 
Specific Integrated Circuit (ASIC) with a Severely Reduced Instruction Set 
(SRIS). All underlying values in the calculations are 16-bit binary numbers [see 
(1) on page 4]. 

1. Multiply £i and C2 as unsigned (16-bit) integers. Save the result as r\. 

2. Add 0000000010000000 (decimal 128) to n; this gives r 2 . 

3. Right shift r 2 by 8 places; this gives r 3 . 

4. Add ri to r3, which gives r 4 . 

5. Add 0000000010000000 (decimal 128) to r 4 ; this gives r 5 . 

6. Right shift r 5 by 8 places; this gives xGC2- 

8.3 Addition Modulo 1 

Given two chromatic values d and £2 , the following steps make £i 4- (2 avail- 
able for further calculation. All calculations make references as in the previous 
subsection [see Conjecture 7 on page 6]. Note how £i + £2 can never become 
negative, and that overflow cannot happen when adding 8-bit integers within 
16-bit digital logic. 

1. Add Ci and £2 as unsigned (16-bit) integers. Save the result as r\. 

2. If n > 255, then subtract 0000000011111111 (decimal 255) from n; this 
gives Ci +C2. 

Note also that underflow is prevented in Step 2 by its conditional nature. 
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8.4 Subtraction Modulo 1 

Given two chromatic values £i and £2* the following steps make d - £2 avail- 
able for further calculation. All calculations make references as in the previous 
subsections [see Conjecture 7 on page 6]. Note how d - £ 2 can never become 
greater than 255. 

1. If (1 > £ 2 , subtract £ 2 from £1 as unsigned (16-bit) integers. The result is 
C1-C2. 

2. If Ci < C2, add 0000000011111111 (decimal 255) to Cil call it n. Now 
subtract £2 from r\ as unsigned (16-bit) integers. The final result is £i -£2- 

3. If Ci = C2> then (1 - £ 2 = 0 (as an unsigned 16-bit integer). 

Note also that underflow is prevented by the conditional logic of Steps 1-3. 

9 Storage and Transmission Requirements 

Each image contains 4£ 2 pixel positions, not all of which need to be stored 

to enable authentication under subsequent processing (even though there is no 

loss of processing capabilities if data were stored for all pixel positions). At 
k 

minimum, since £ ny-many pixel positions are used in the calculation of M w , 

. k 

then 24 £ Uj bits need to be stored to account for the color matrix C from the 

k 

image fi. Furthermore, q £ ra^-many bits need to be stored to account for I, 

k 

and 8 ^j-many bits need to be stored to account for Y. 

k 

Therefore, to store (I, Y, Q) for authentication purposes, space for (32 + q) ]T nj 

j=i 

bits are needed. However, in the case that Q, must be stored in its entirety for 
transmission purposes, then only 

k 

(8 + 9 )£»i 

bits need be stored for authentication purposes. 

Under the common use of f = 300 (DPI), then q = 19 (since 2 18 = 262144 < 
360000 = 4 (300) 2 < 524288 = 2 19 ). If k = 5 sets of = 8 pixel positions are 
used (for a total of 40 positions), then 

k 

(8 + q)J2 n j = 27 x 40 = 1080 
3=1 
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bits are needed to store one processing. set. This is slightly more than 1 kilobyte 
of information per processing set. 

However, 24 x 4 x (300) = 8,640,000 bits, or approximately 8 megabytes 
are needed to store and transmit the entire image for end-processing purposes. 
This number may be significantly reduced by compression algorithms. 

Alternatively, scanning may proceed at £ = 72 (DPI), which is the typical 
resolution for monitor display. This means 24 x 4 x (72) 2 = 20736 bits are 
needed to store the entire image, or slightly more than 20 kilobytes per stored 
image. Even with only 20000 (or so) pixel positions from which to choose, 
at most 40 are needed under the circumstances described above, and ( 20 4 0 0 00 ) 
is astronomically larger than the expected number of individual images to be 
processed. 
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